2026 Star Hospitals (Hyderabad) — patient/employee data on warehouse.diy; TGCSB case
Data compromised
Allegedly patients’ personal details and medical records, employee information, and confidential hospital documents (per complaint / Telangana Today). No public headcount published at indexing.
Technical writeup
Verified complaint / regulator action — Star Hospitals CEO Rahul Medakkar lodged a complaint; Telangana Cyber Security Bureau (TGCSB) registered a case under BNS and IT Act sections (Telangana Today / Newsmeter, 3 Aug 2026). Hospital IT reportedly found confidential information hosted on warehouse.diy without authorisation, with login credentials also circulating on WhatsApp. Exposed material allegedly includes patient personal and medical records, employee details and internal documents. Star said it shares data only with named authorised tech partners (Kranium, HEAPS, Verventus/Medblaze, IMImobile/Cisco, MarketXpander) and denied authorising any other publisher. Investigation ongoing; no public count of affected patients — recordsAffected 0 pending attestation.
Root cause
Hospital IT discovered confidential Star Hospitals data hosted on unauthorised website warehouse.diy; login credentials circulated on WhatsApp (CEO complaint to TGCSB)